WHY PATCHING WHILE SERIAL NUMBER IS FISHY MiniSetup v1.3.2 A Cracking Tutorial by ASTAGA [D4C/C4A] ABOUT THE PROGRAM MiniSetup is a program that enables you to "collect" a group of files (programs, pictures, text files, spreadsheets, etc.) into one single compressed EXE file that when run on your client's computer will "install" the entire collection. If you're a programmer and are looking for a low-cost setup program or if you are a computer user just looking for an easy way to "package" up some files, MiniSetup is for you. BACKGROUND INFORMATION Program Name: MiniSetup.exe Platforms: Windows 95/98/NT Free trial period: 30 days Registration cost: $15 US$. Current version: 1.3.2 / (1.0.4 Installer) Version date: 06-Apr-2000 (c)Copyright 2000 - Donth Technology Group Web site: www.donth.com Author : Joseph L. Donth HOW TO FISH SERIAL NUMBER by USING SOFTICE 1. Run the program, click REGISTER button and keyed-in fake reg code = 73881050 Do not click OK button yet. 2. Load SoftIce and create a new breakpoint : bpx hmemcpy Press F5 3. Click OK button now, and you'll break in SoftIce again. Press F11 once and press F12 several times until you see this below snippet codes. __________________________________________________________________ 015F:0044A8BE E865F2FDFF CALL 00429B28 <== break here 015F:0044A8C3 8B55D8 MOV EDX,[EBP-28] 015F:0044A8C6 8B45F8 MOV EAX,[EBP-08] <== D EDX 015F:0044A8C9 E86291FBFF CALL 00403A30 ........ ........ ________________________MINISETUP!CODE+000498BC_____________________ Break due to BPX KERNEL!HMEMCPY Break due to G bd * [enter] : BPX 015F:0044A8BE [enter] : Press F10 2 times and display EDX register, your fake reg code appear in the Data Window at virtual address 0167:00BCADE0 . : BPM 0167:00BCADE0 [enter] : Press X or F5 You'll break again in SoftIce and see these below snippet codes : _________________________________________________________________ 015F:00403D91 8B0E MOV ECX,[ESI] 015F:00403D93 8B1F MOV EBX,[EDI] <== here 015F:00403D95 39D9 CMP ECX,EBX <== D EDI 015F:00403D97 7558 JNZ 00403DF1 ..... ..... __________________________ MINISETUP!CODE+2D91 ___________________ Break due to BPMB #0167:00BCADE0 RW DR3 Press F10 once : ? ecx [enter] : 38383337 0943207223 "8837" ==> part of your fake code : ? ebx [enter] : 32363130 0842412336 "2610" ==> part of the real code : d esi [enter] ===> your fake code at : d edi [enter] ===> did you see 0162-5328-0833-2286 at 0167:00BC8C6C . Write down this potential reg code. Scroll up one line above you will see your own product ID ( in my case is 5557-6193-0442-9236 ) . : bd * : F5 to return to registration dialog box 4. Repeat registration procedures, and keyed-in 0162-5328-0833-2286 as your registration code. You're registered. 5. Where the hell is my registration info is stored ?? - The correct registration code is stored in the HKCR and HKLM registry as follows ( before it's registered ) : REGEDIT4 [HKEY_CLASSES_ROOT\CLSID\{73C05900-6B69-11D3-AA01-E7A3A0900002}] [HKEY_CLASSES_ROOT\CLSID\{73C05900-6B69-11D3-AA01-E7A3A0900002}\ProgID] @="008FFD" [HKEY_CLASSES_ROOT\CLSID\{73C05900-6B69-11D3-AA01-E7A3A0900002}\Mask] @="428E271E" REGEDIT4 [HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{73C05900-6B69-11D3-AA01-E7A3A0900002}] [HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{73C05900-6B69-11D3-AA01-E7A3A0900002}\ProgID] @="008FFD" [HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{73C05900-6B69-11D3-AA01-E7A3A0900002}\Mask] @="428E271E" 6. How can I practise with another registration key ? - I strongly recommended you not to do this ! END NOTES This program is sold as shareware, so you can try before you buy. This is convenient for you, saves expenses by dispensing with all that packaging, and cuts out the middle person. So it is cheap, but it is not free. If you like the program, and you will, be sure to register and pay. To keep shareware prices low, users must do the right thing: Register, pay up, and smile/grin at yourself in the mirror. Do not distribute your crack release based on this tutorial, because you become a LAMER(s)!!!!!!!! ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of personal computer, using Hex Editor, ripping off other group(s) crack release, repacking (distro) them under his name. Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) More about LAMER(s): lamer /n./ [prob. originated in skateboarder slang] Synonym for luser, not used much by hackers but common among warez d00dz, crackers, and phreakers. Oppose elite. Has the same connota tions of self-conscious elitism that use of luser does among hackers. < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html > _ Never attribute to malice that which is adequately explained by stupidity _ ASTAGA [D4C/C4A] tute-minisetup132.zip [EOF] 10/31/00 6:32:06 PM